How to set Secure Boot in Setup Mode from BIOS?

Purpose:

Enroll PK only valid when Secure Boot set disabled and return to Setup Mode.

Target Audience:

To who has well understood PKI and Secure Boot.

Steps:

1. Enter BIOS setup and disable Secure Boot.

2. Keep "Secure Boot Mode" in Custom.

3. Select "Reset To Setup Mode".

4. System Mode will be changed to "Setup" after Step #3.

5. Press [Esc] and "Save Changes and Reset".

6. Enter BIOS to check System Mode in Setup.

7. Enter Linux and leverage the command as another confirmation.

# sudo apt install efitools

# sudo mokutil --sb-state
SecureBoot disabled
Platform is in Setup Mode